Cloudlock Documentation

  • Home

    The Cisco Cloudlock Documentation Hub

    Welcome to the Cisco Cloudlock Documentation hub. You will find comprehensive guides and documentation to help you get set up and working efficiently with Cloudlock.

    Cloudlock Documentation
    • Umbrella User Guide
    • Hardware Integrations
    • Partner Console Documentation
    • MSP User Guide
    • Cloudlock Documentation
    • Umbrella SIG User Guide
    • Guides
    • Investigate-UI
    • Managed Services Console User Guide
    • ISP Deployment
    v1.0HomeDocumentation and GuidesRecipesAPI ReferenceReferenceRelease NotesDiscussionsPage Not FoundSearch{{ state.current().meta.title }}API Logs
      HomeDocumentation and Guides
    discard

    Release Notes

    • April 21, 2023
    • November 15, 2021
    • July 15, 2021
    • June 01, 2021
    • April 14, 2021
    • February 22, 2021
    • January 19, 2021
    • December 15, 2020
    • October 7, 2020
    • September 22, 2020
    • September 21, 2020
    • September 14, 2020
    • August 4, 2020
    • June 26, 2020
    • April 20, 2020
    • February 11, 2020
    • February 6, 2020
    • November 5, 2019
    • September 9, 2019
    • August 1, 2019
    • July 30, 2019
    • July 26, 2019
    • July 25, 2019
    • July 11, 2019
    • July 3, 2019
    • June 26, 2019
    • June 04, 2019
    • May 20, 2019
    • May 15, 2019
    • May 6, 2019
    • May 2, 2019
    • April 15, 2019
    • April 4, 2019
    • March 21, 2019
    • March 14, 2019
    • March 13, 2019
    • March 7, 2019
    • January 23, 2019
    • January 15, 2019
    • December 12, 2018
    • November 28, 2018
    • November 19, 2018
    • November 5, 2018
    • October 31, 2018
    • October 18, 2018
    • September 19, 2018
    • August 22, 2018
    • August 15, 2018
    • August 9, 2018
    • August 8, 2018
    • July 30, 2018
    • July 25, 2018
    • July 19, 2018
    • July 18, 2018
    • June 28, 2018
    • June 27, 2018
    • May 30, 2018
    • May 16, 2018
    • April 30, 2018

    Navigate the Main Pages

    • Enable Cisco SSO
    • Dashboard Overview
    • Search Page Overview
    • Incidents Page Overview
    • Policies Page Overview
    • Apps Page Overview
    • Operations Page Overview
    • Support Page Overview
    • Settings Page Overview
      • Platforms
      • Manage Users
      • Manage Roles
      • Integrations
      • Email Settings
      • Authentication and API
      • Support Settings
    • Audit Log Overview
    • Retro Scans Overview

    Cloudlock Overviews

    • Threat Detection Technical Overview
    • Cisco Cloudlock Data Storage Overview
    • Cisco Cloudlock Regular Expressions Guide
      • Write Regular Expressions
      • Read Regular Expressions
      • Predefined Character Classes & Shortcuts
      • Create and Test a Regex Policy
      • Use Exceptions in a Regex Policy
    • Filetypes Supported in Content Policies
    • Cisco Cloudlock Users and Usage Policy
      • Archived version

    Platform Overviews

    • Box
    • Dropbox
    • Google
      • Google Drive
      • Google Sites
      • Google Team Drive
      • Enable Google Object Activity History
    • Office365
    • Okta
    • OneLogin
    • Salesforce
      • Salesforce Objects
    • ServiceNow
      • ServiceNow Objects
    • Slack
    • Webex
      • Webex Meetings
      • Webex Messaging (Teams)

    Policy Configuration

    • Build Your Own
      • Context Only
      • Custom Regex
      • Events Analysis
    • Predefined
      • Predefined Policy Configuration
      • Education Predefined Policies
      • Financial Predefined Policies
      • General Predefined Policies
      • Healthcare Predefined Policies
    • Content Identifiers in Predefined Policies
      • Bank and Financial Identifiers
      • Credit Card Number
      • Date of Birth
      • Drug Name and Health Condition
      • EU Personal Identifiers
      • US Personal Identifiers
      • VAT and TIN
    • Exposure by Platform
    • Cloning a Policy
    • Response Actions
      • Global
      • Box
      • Dropbox
      • Google
      • Office 365
      • OneLogin
      • Okta
      • Salesforce
      • ServiceNow
      • Slack (Enterprise)
      • Webex Teams
      • Response Actions Workflow

    Incident Management

    • Incident Status Overview
    • Data Loss Prevention (DLP) Incidents
    • User Events and Behavior Analysis Incidents
    • (Asynchronous) Incident Export

    Apps Firewall

    • Introduction
    • Classify Apps
      • App Classifications
    • App Details
    • App Policies
      • Risky Access Scopes
      • Trusted Apps by Name
      • Trusted Access Scopes
      • New Unclassified Apps
      • Revoke Banned Apps
      • Monitor Under Audit Apps
      • Apps Policies Workflow
    • Response Actions
    • Revoke an App
    • Restrict an App
    • Access Scopes
      • Google Scope Categories
      • Google Scope Category Changes
      • Office365 Scope Categories
    • Risk Scores
    • App Incidents
      • Incident Details
      • Incident Summary Actions

    Quick Start Setup Guides

    • Active Directory Federation Services (ADFS) SAML Setup Guide
    • App Discovery
    • Box
    • Dropbox
    • Google Suite
      • Complete List of Requested Scopes
    • Office 365
    • Okta
    • OneLogin
    • Salesforce
      • How To Turn On View All Data in Salesforce
    • ServiceNow
    • Slack
      • Slack (Teams)
      • Slack (Enterprise)
    • Webex as a new Platform

    API Documentation

    • Cisco Cloudlock APIs
    • Introduction to Enterprise API
      • Resources Returned via API
    • Incidents Endpoint
      • Incidents Entities Endpoint
      • Incident Aggregates Endpoint
    • Policies Endpoint
    • Apps Endpoint
    • Activities Endpoint
    • Entities Endpoint
    • IP Libraries Endpoint
    • Anomalies Endpoint

    How To

    • How to Build Effective Event Analysis Policies
    • How to Configure a Restricted App

    Troubleshooting

    • Why Are My SSN and CCN Policies Not Triggering?
    • Why Do Scans Appear as User Download Activity?
    • Troubleshooting Apps Firewall

    Release Notes

    • April 21, 2023
    • November 15, 2021
    • July 15, 2021
    • June 01, 2021
    • April 14, 2021
    • February 22, 2021
    • January 19, 2021
    • December 15, 2020
    • October 7, 2020
    • September 22, 2020
    • September 21, 2020
    • September 14, 2020
    • August 4, 2020
    • June 26, 2020
    • April 20, 2020
    • February 11, 2020
    • February 6, 2020
    • November 5, 2019
    • September 9, 2019
    • August 1, 2019
    • July 30, 2019
    • July 26, 2019
    • July 25, 2019
    • July 11, 2019
    • July 3, 2019
    • June 26, 2019
    • June 04, 2019
    • May 20, 2019
    • May 15, 2019
    • May 6, 2019
    • May 2, 2019
    • April 15, 2019
    • April 4, 2019
    • March 21, 2019
    • March 14, 2019
    • March 13, 2019
    • March 7, 2019
    • January 23, 2019
    • January 15, 2019
    • December 12, 2018
    • November 28, 2018
    • November 19, 2018
    • November 5, 2018
    • October 31, 2018
    • October 18, 2018
    • September 19, 2018
    • August 22, 2018
    • August 15, 2018
    • August 9, 2018
    • August 8, 2018
    • July 30, 2018
    • July 25, 2018
    • July 19, 2018
    • July 18, 2018
    • June 28, 2018
    • June 27, 2018
    • May 30, 2018
    • May 16, 2018
    • April 30, 2018

    Navigate the Main Pages

    • Enable Cisco SSO
    • Dashboard Overview
    • Search Page Overview
    • Incidents Page Overview
    • Policies Page Overview
    • Apps Page Overview
    • Operations Page Overview
    • Support Page Overview
    • Settings Page Overview
      • Platforms
      • Manage Users
      • Manage Roles
      • Integrations
      • Email Settings
      • Authentication and API
      • Support Settings
    • Audit Log Overview
    • Retro Scans Overview

    Cloudlock Overviews

    • Threat Detection Technical Overview
    • Cisco Cloudlock Data Storage Overview
    • Cisco Cloudlock Regular Expressions Guide
      • Write Regular Expressions
      • Read Regular Expressions
      • Predefined Character Classes & Shortcuts
      • Create and Test a Regex Policy
      • Use Exceptions in a Regex Policy
    • Filetypes Supported in Content Policies
    • Cisco Cloudlock Users and Usage Policy
      • Archived version

    Platform Overviews

    • Box
    • Dropbox
    • Google
      • Google Drive
      • Google Sites
      • Google Team Drive
      • Enable Google Object Activity History
    • Office365
    • Okta
    • OneLogin
    • Salesforce
      • Salesforce Objects
    • ServiceNow
      • ServiceNow Objects
    • Slack
    • Webex
      • Webex Meetings
      • Webex Messaging (Teams)

    Policy Configuration

    • Build Your Own
      • Context Only
      • Custom Regex
      • Events Analysis
    • Predefined
      • Predefined Policy Configuration
      • Education Predefined Policies
      • Financial Predefined Policies
      • General Predefined Policies
      • Healthcare Predefined Policies
    • Content Identifiers in Predefined Policies
      • Bank and Financial Identifiers
      • Credit Card Number
      • Date of Birth
      • Drug Name and Health Condition
      • EU Personal Identifiers
      • US Personal Identifiers
      • VAT and TIN
    • Exposure by Platform
    • Cloning a Policy
    • Response Actions
      • Global
      • Box
      • Dropbox
      • Google
      • Office 365
      • OneLogin
      • Okta
      • Salesforce
      • ServiceNow
      • Slack (Enterprise)
      • Webex Teams
      • Response Actions Workflow

    Incident Management

    • Incident Status Overview
    • Data Loss Prevention (DLP) Incidents
    • User Events and Behavior Analysis Incidents
    • (Asynchronous) Incident Export

    Apps Firewall

    • Introduction
    • Classify Apps
      • App Classifications
    • App Details
    • App Policies
      • Risky Access Scopes
      • Trusted Apps by Name
      • Trusted Access Scopes
      • New Unclassified Apps
      • Revoke Banned Apps
      • Monitor Under Audit Apps
      • Apps Policies Workflow
    • Response Actions
    • Revoke an App
    • Restrict an App
    • Access Scopes
      • Google Scope Categories
      • Google Scope Category Changes
      • Office365 Scope Categories
    • Risk Scores
    • App Incidents
      • Incident Details
      • Incident Summary Actions

    Quick Start Setup Guides

    • Active Directory Federation Services (ADFS) SAML Setup Guide
    • App Discovery
    • Box
    • Dropbox
    • Google Suite
      • Complete List of Requested Scopes
    • Office 365
    • Okta
    • OneLogin
    • Salesforce
      • How To Turn On View All Data in Salesforce
    • ServiceNow
    • Slack
      • Slack (Teams)
      • Slack (Enterprise)
    • Webex as a new Platform

    API Documentation

    • Cisco Cloudlock APIs
    • Introduction to Enterprise API
      • Resources Returned via API
    • Incidents Endpoint
      • Incidents Entities Endpoint
      • Incident Aggregates Endpoint
    • Policies Endpoint
    • Apps Endpoint
    • Activities Endpoint
    • Entities Endpoint
    • IP Libraries Endpoint
    • Anomalies Endpoint

    How To

    • How to Build Effective Event Analysis Policies
    • How to Configure a Restricted App

    Troubleshooting

    • Why Are My SSN and CCN Policies Not Triggering?
    • Why Do Scans Appear as User Download Activity?
    • Troubleshooting Apps Firewall
    Only admins can see thisEnable it for everyone

    Release Notes

    • April 21, 2023
    • November 15, 2021
    • July 15, 2021
    View All 59

    Navigate the Main Pages

    • Enable Cisco SSO
    • Dashboard Overview
    • Search Page Overview
    View All 11

    Cloudlock Overviews

    • Threat Detection Technical Overview
    • Cisco Cloudlock Data Storage Overview
    • Cisco Cloudlock Regular Expressions Guide
    View All 5

    Platform Overviews

    • Box
    • Dropbox
    • Google
    View All 10

    Policy Configuration

    • Build Your Own
    • Predefined
    • Content Identifiers in Predefined Policies
    View All 6

    Incident Management

    • Incident Status Overview
    • Data Loss Prevention (DLP) Incidents
    • User Events and Behavior Analysis Incidents
    View All 4

    Apps Firewall

    • Introduction
    • Classify Apps
    • App Details
    View All 10

    Quick Start Setup Guides

    • Active Directory Federation Services (ADFS) SAML Setup Guide
    • App Discovery
    • Box
    View All 12

    API Documentation

    • Cisco Cloudlock APIs
    • Introduction to Enterprise API
    • Incidents Endpoint
    View All 9

    How To

    • How to Build Effective Event Analysis Policies
    • How to Configure a Restricted App

    Troubleshooting

    • Why Are My SSN and CCN Policies Not Triggering?
    • Why Do Scans Appear as User Download Activity?
    • Troubleshooting Apps Firewall
    Need Help?

    For technical support please contact our Cisco Cloudlock Support Team at [email protected]

    Looking For More Education on Cloudlock?

    See our eLearning content at https://learning.cloudlock.com

    Sales

    To contact Sales for Cloudlock go to cloudlock.com

    For Sales on Umbrella go to umbrella.cisco.com